Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136332e302f32342d3234203d3e20313734.roa
File:                     3231362e3135312e3136332e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          b3NYlFuErnqkV5L+x8Y/P2ZFi3A7eZqPFBnX5wOCfDo=
Subject key identifier:   FE:EB:1E:44:67:F2:34:11:DB:DC:07:B7:FB:EE:BC:24:A8:2C:F2:B0
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       6B18DB66D434096549AC0C91C4CA417EA4689D49
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136332e302f32342d3234203d3e20313734.roa
Signing time:             Wed 02 Jul 2025 15:29:44 +0000
ROA not before:           Wed 02 Jul 2025 15:24:44 +0000
ROA not after:            Wed 01 Jul 2026 15:29:44 +0000
asID:                     174
IP address blocks:        216.151.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 31 Jul 2025 22:38:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:18:db:66:d4:34:09:65:49:ac:0c:91:c4:ca:41:7e:a4:68:9d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: Jul  2 15:24:44 2025 GMT
            Not After : Jul  1 15:29:44 2026 GMT
        Subject: CN=FEEB1E4467F23411DBDC07B7FBEEBC24A82CF2B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d9:51:c6:5a:d0:28:28:60:b4:cc:05:a2:00:
                    18:30:2d:c4:a4:1b:f3:56:bb:e5:f2:b4:3a:62:06:
                    66:fb:e2:c7:15:50:e4:cd:1a:ba:d1:1d:98:35:d2:
                    68:9b:4e:52:b2:d3:a2:3f:ae:fe:38:69:11:12:ec:
                    03:0b:a5:c3:ca:c0:72:32:ee:b3:41:d4:17:80:69:
                    37:e6:d2:d1:80:b2:cd:96:ec:da:26:85:b4:f3:49:
                    6f:ea:4c:8e:60:ac:8a:40:3e:14:b6:ee:65:c5:c2:
                    b4:31:d8:c8:54:89:51:40:e3:a9:2f:9f:24:82:ca:
                    e5:be:5f:c1:3a:16:1d:f7:8c:e1:5e:29:69:ad:89:
                    6e:9d:19:60:c3:51:d1:91:7d:03:5d:c6:92:42:a1:
                    7c:c6:ed:f2:c7:ed:9d:b7:1e:20:37:5d:51:9c:1b:
                    c3:39:58:b6:f1:5b:45:17:f7:83:72:04:1d:bc:08:
                    a1:80:7d:a5:9c:aa:5b:13:67:4a:ad:be:9d:4d:47:
                    c4:37:83:8c:15:e8:19:fd:0f:c5:62:03:f0:4f:5f:
                    12:9f:10:e6:b7:b4:cd:f9:37:3a:30:f2:8b:42:ef:
                    34:8e:9b:dd:7b:0e:9d:c4:d8:56:99:02:a6:36:68:
                    a1:3a:25:6c:79:b8:d4:04:8d:b3:13:ab:f9:f5:b8:
                    a8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EB:1E:44:67:F2:34:11:DB:DC:07:B7:FB:EE:BC:24:A8:2C:F2:B0
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136332e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:e5:17:95:54:14:78:33:eb:cb:2d:92:82:9c:22:68:4c:8b:
         0e:a2:b5:c7:b5:a6:89:cc:e8:68:99:4b:b1:e9:02:e6:53:08:
         a6:02:fd:bc:eb:28:23:a8:62:e5:ae:d6:72:09:c0:db:4e:e0:
         06:4b:55:4f:76:07:0b:81:fd:85:b8:92:cf:7c:3c:76:b9:0a:
         46:6b:cd:4a:2f:85:a0:c0:8a:e8:ba:74:f7:87:c0:4f:46:49:
         d6:85:99:fd:0e:91:3f:9f:19:c4:46:0c:51:2f:ef:15:45:02:
         78:07:8d:4d:26:ce:c9:28:a0:7f:eb:ff:d5:fc:77:92:ce:58:
         84:89:dc:11:6f:2e:11:d6:8c:fd:67:4a:c9:a7:c9:85:6c:fd:
         25:67:77:f6:22:2f:b5:60:fa:f8:ac:d0:40:dd:fb:3f:ab:2d:
         9b:55:6a:f2:02:aa:b0:18:3b:67:a3:9b:8c:b3:09:48:00:d8:
         4f:e9:0e:0c:c5:d2:55:17:9b:0d:23:d2:d3:3b:9b:ee:c3:54:
         67:ec:f1:b3:45:b9:94:7b:c2:72:1f:00:65:9e:70:40:5c:a5:
         38:45:15:ef:d8:27:1b:27:ae:1b:a2:29:e9:09:a8:94:eb:67:
         07:7f:b2:67:74:12:28:73:e1:9f:9f:65:e3:52:82:9c:14:49:
         6f:a5:2e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 06:39:56 2025 by rpki-client